This policy explains what personal data WadataHR collects, why we collect it, how we use it, and your rights. We have written it in plain language because we believe you deserve to understand exactly what happens to your data.
WadataHR is operated by Wadata HR Solutions Limited, a company registered in Nigeria with its principal place of business in Awka, Anambra State.
When this policy refers to "WadataHR", "we", "us", or "our", we mean Wadata HR Solutions Limited. When it refers to "you", we mean the business owner, administrator, or individual accessing our platform.
You can contact us at: privacy@wadatahr.com
We collect the following categories of personal and business data:
Account Information: Name, email address, WhatsApp number, business name, CAC number, Tax Identification Number (TIN), and state of operation.
Worker Data: Full names, email addresses, phone numbers, National Identification Numbers (NIN), Tax Identification Numbers (TIN), job titles, salary information, bank account details, Pension Fund Administrator (PFA) details, and RSA numbers of employees registered on the platform.
Payroll Data: Monthly salary calculations, statutory deductions (PAYE, pension, NHF, NSITF), net pay figures, and payroll run history.
Compliance Data: Records of statutory remittances including PAYE, pension, WHT, NSITF, and NHF remittance history.
Contract Data: Employment contract details, signing dates, and digital signature records.
Payment Data: Subscription billing information processed through Flutterwave. We do not store card details - these are held by Flutterwave in accordance with PCI DSS standards.
Technical Data: IP addresses, browser type, device information, and usage logs for security and performance monitoring.
Early Access Enquiries: If you complete the early access form on our website, we collect your name, work email address, company name, and job role, together with the answers you give about how you currently run payroll and which HR and compliance tasks you find difficult. You do not need an account with us to submit this form, and you are not a customer by submitting it. One question is a free-text box; please do not enter your employees' personal details there, as we only need a description of the problem.
We use your data to:
We do not sell your data to third parties. We do not use your data for advertising purposes.
Under the Nigeria Data Protection Act 2023 (NDPA), we process your data on the following legal bases:
Contractual necessity - to provide the services you have subscribed to.
Legal obligation - to maintain records required by Nigerian tax and labour law.
Legitimate interests - to improve our platform and prevent fraud.
Consent - where you have explicitly opted in to optional features, and where you submitted the early access form. You gave that information voluntarily and you can withdraw it at any time by emailing hello@wadatahr.com, after which we will delete your enquiry and stop contacting you.
When you enter worker data into WadataHR, you are acting as the data controller for that information and your workers are the data subjects. This means you are responsible for:
WadataHR acts as a data processor on your behalf. We process worker data only as instructed by you through the platform and in accordance with this policy. Workers may also contact us directly at privacy@wadatahr.com if they have concerns about how their data is being processed.
We do not sell, rent, or share your data with third parties for commercial purposes. We share data only in the following limited circumstances:
Flutterwave - payment processing for subscriptions. Flutterwave's Privacy Policy is available at flutterwave.com/ng/privacy-policy.
Resend - email delivery for payslips, contracts, and compliance notifications. Only the recipient email address and email content are shared.
Cloud hosting provider - our managed database, authentication, and file storage. We will name our current provider and hosting region on request; email hello@wadatahr.com.
Cloud spreadsheet service - early access form responses are stored in a hosted spreadsheet so we can review and follow up on them. This service may store data outside Nigeria. We will name the provider on request; email hello@wadatahr.com.
Legal requirements - we may disclose data if required to do so by Nigerian law, court order, or a legitimate request from a regulatory authority.
Business transfers - if WadataHR is acquired or merges with another company, your data may transfer as part of that transaction. We will notify you before this happens.
Your data is stored on secure, access-controlled servers operated by a managed cloud hosting provider. We implement the following security measures:
No system is completely immune to security risks. If we become aware of a breach that affects your data, we will notify you promptly.
We retain your account data for as long as your account is active. If you close your account, we will delete your data within 90 days unless we are required by law to retain it for longer.
Under the Nigeria Data Protection Act 2023, you have the right to:
To exercise any of these rights, contact us at privacy@wadatahr.com. We will respond within 14 working days.
For complaints, you may also contact the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng.
WadataHR uses essential cookies only:
We do not use tracking, analytics, or advertising cookies. You can disable cookies in your browser settings but this may affect how the platform functions.
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and update the date at the top of this page. Your continued use of WadataHR after changes are posted means you accept the updated policy.
If you have questions about this policy or how we handle your data, contact us: